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DETAILED ACTION 



Specification 

1 . Applicant's amendment to specification addresses objections in the First Office Action. 
Examiner withdraws objection to the specification. 



2. Applicant's amendments to Claims 1, 3, 8, 11, 14, 24-25, 35, and 38 address the 35 USC 
§112, 2 nd paragraph rejections of Claims 1-26, 35, and 38. Examiner withdraws the 35 USC 
§112, 2 nd paragraph rejections of Claims 1-26, 35, and 38. 



3. The following is a quotation of 35 U.S.C 103(a) which forms the basis for all 

obviousness rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed or described as set forth in 
section 102 of this title, if the differences between the subject matter sought to be patented and the prior art are 
such that the subject matter as a whole would have been obvious at the time the invention was made to a person 
having ordinary skill in the art to which said subject matter pertains. Patentability shall not be negatived by the 
manner in which the invention was made. 



4. Claims 1-3, 5-20, and 22-27 are rejected under 35 U.S.C. 103(a) as being unpatentable 
over U.S. Patent No. 5,412,730 issued to Jones (Jones '730) in view of U.S. Patent No. 
5,805,700 issued to Nardone et al. (Nardone '700) and in further view of U.S. Patent No. 
5,933,501 issued to Leppek (Leppek '501). 

Claims K 2, 5-8, 12-19, and 26-27 (amended per response to applicant's arguments): 



Claim Rejections - 35 USC §112 



Claim Rejections - 35 USC § 103 
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Regarding Claim 1, Jones c 730 teaches corresponding limitations, specifically a method 
for protecting a stream of data to be transferred between an encryption unit and a decryption unit 
(column 12, lines 25-27; Jones '730), said method comprising: 

encrypting the stream of data at a said encryption unit for transferring of said 
encrypted stream of data from said encryption unit to said decryption unit 
(column 12, lines 38-39; Jones £ 730); 

dynamically varying said encrypting of said stream of data at said encryption 
unit by changing at least one encryption parameter and signaling said change in 
encryption parameter to said decryption unit, said dynamically varying of said at 
least one encryption parameter being responsive to occurrence of a predefined 
condition in said stream of data (column 12, lines 32-37 and column 12, lines 
40-49; Jones c 730); and 

decrypting said encrypted data at the decryption unit, said decrypting accounting 
for said dynamic varying of said encrypting by said encryption unit using said 
changed encryption parameter (column 12, lines 50-51; Jones '730). 
The preferred embodiment of Jones '730 discloses an invention in which "means are 
employed at both the transmitting and receiving stations to monitor the flow of transmitted data 
and to advance the random number generator each time the transmitted data satisfies a 
predetermined condition" (column 1, lines 50-54; Jones '730). This advancement causes the 
change of the cryptographic key used to encrypt and decrypt the data stream, and thus constitutes 
dynamic variance. 
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Jones c 730 does not teach the newly added limitation of "dynamically changing 
simultaneously multiple encryption parameters." 

Nardone c 700 teaches dynamically changing encryption parameters as described in 
paragraphs 12-13 below. However, Nardone '700 does not explicitly teach setting multiple 
parameters. 

Leppek '501 teaches setting multiple parameters as described in paragraphs 12-13 below. 

It would have been obvious to a person having ordinary skill in the art to combine Jones 
730, Nardone 700, and Leppek '501 on the basis of the description in paragraphs 12-13 below. 

Regarding Claim 2, Jones '730, Nardone '700, and Leppek '501 in combination teach 
corresponding limitations, specifically all the limitations of Claim 1 described above, plus 
specifying at least one encryption parameter that comprises "at least one of an encryption key, an 
encryption granularity, an encryption density scale, an encryption density, an encryption delay, 
an encryption key update variable, and an encryption key update data trigger" (column 12, lines 
32-37 and column 12, lines 40-49; Jones '730). Jones '730 teaches the varying of the encryption 
key. Since this encryption key, which is varied, is one of the enumerated parameters, this 
constitutes varying at least one of the parameters enumerated in Claim 2. Furthermore, regarding 
Claim 2 as amended, Jones '730, Nardone '700, and Leppek '501 in combination address the 
issue of "multiple parameters" which also covers the issue of, "at least two parameters", as 
described in paragraphs 12-13 below. 

Regarding Claim 5, Jones '730, Nardone '700, and Leppek '501 in combination teach 
corresponding limitations, specifically all the limitations of Claim 1 described above, plus 
specifying that "dynamically varying said encryption parameter based on passage of a predefined 
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number of units of physical data or passage of a predefined number of conceptual units of data" 
(column 12, lines 35-37 and column 12, lines 48-49; Jones '730). Jones '730 teaches use of a 
block counter to measure the data stream in order to determine when to vary the cryptographic 
key used to encrypt and decrypt the data stream (column 3, lines 33-36 and column 3, lines 64- 
68; Jones '730). Furthermore, regarding Claim 5 as amended, Jones '730, Nardone '700, and 
Leppek '501 in combination address the issue of "multiple parameters" as described in 
paragraphs 12-13 below. 

Regarding Claim 6, Jones '730, Nardone '700, and Leppek '501 in combination teach 
corresponding limitations, specifically all the limitations of Claim 5 described above, plus 
specifying that the "encryption parameter comprises an encryption key" (column 8, lines 26-36; 
Jones £ 730). 

Regarding Claim 7, Jones '730, Nardone '700, and Leppek '501 in combination teach 
corresponding limitations, specifically all the limitations of Claim 1 described above, plus 
specifying that the "stream of data comprises a stream a compressed data, and wherein said 
method further comprises decompressing said compressed data after said decrypting of said 
encrypted data by said decrypting unit" (column 2, line 29; column 8, line 5, and column 8, lines 
16-22; Jones '730). 

Regarding Claim 8, Jones '730, Nardone '700, and Leppek '501 in combination teach 
corresponding limitations, specifically all the limitations of Claim 7 described above, plus 
specifying that, "said stream of compressed data can comprise one of MPEG encoded video data, 
MPEG encoded audio data, and Dolby AC-3 audio data" (column 3, lines 12-16; Jones '730). In 
fact, the method of Jones '730 is independent of the format of the data to be transmitted. 
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Furthermore, there are no non-obvious consequences of choosing to carry MPEG or AC-3 data. 

Regarding Claim 12, Jones '730, Nardone '700, and Leppek '501 in combination teach 
corresponding limitations, specifically all the limitations of Claim 1 described above, plus 
specifying "said encrypting comprises encrypting multiple portions of said data stream and 
wherein said dynamically varying comprises dynamically varying said encrypting of said 
multiple portions of said data stream by changing said at least one encryption parameter for each 
portion of said multiple portions" (column 3, lines 19-25; Jones '730). Jones c 730 explicitly 
teaches measuring the passage of data via a block counter and using a predetermined length as 
the criteria on when to change the encryption key. The length of bit stream delineated by the 
block counter constitutes a portion of the bit stream and varying the encryption key constitutes 
changing at least one encryption parameter. Furthermore, regarding Claim 12 as amended, Jones 
'730, Nardone '700, and Leppek '501 in combination address the issue of "multiple parameters" 
as described in paragraphs 12-13 below. 

Regarding Claim 13, Jones '730 , Nardone '700, and Leppek '501 in combination teach 
corresponding limitations, specifically all the limitations of Claim 1 described above, plus 
specifying, "dynamically varying said at least one encryption parameter responsive to passage of 
a predefined number of data bits in said stream of data or alternatively, responsive to passage of 
a predefined number of data units in said stream of data wherein said data units comprise at least 
one of a program, a sequence, a group of pictures, a slice, or a macroblock" (column 3, lines 19- 
25; Jones '730). Jones '730 explicitly teaches measuring the passage of data via a block counter 
and using a predetermined length as the criteria on when to change the encryption key. Varying 
the encryption key constitutes changing at least one encryption parameter. Furthermore, Jones 
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'730 states that, "Advantageously, the block counter may simply count the number of bytes, 
words or blocks of data being transmitted ..." (column 3, lines 19-22; Jones '730). In the case of 
MPEG encoding, an implementer who wished to identify such an advantageous block of data 
would choose MPEG specific data lengths which include items such as a slice or a macroblock 
as enumerated in Claim 13. Furthermore, regarding Claim 13 as amended, Jones '730, Nardone 
'700, and Leppek '501 in combination address the issue of "multiple parameters" as described in 
paragraphs 12-13 below. 

Regarding Claim 14, Jones '730, Nardone '700, and Leppek '501 in combination teach 
all the limitations of the claim using a similar argument as provided for Claim 1 above. 
Specifically, Jones '730 teaches a system that encrypts (column 12, lines 38-39; Jones '730) and 
decrypts (column 12, lines 50-51; Jones '730) data while varying an encryption parameter 
(column 12, lines 32-37 and column 12, lines 40-49; Jones '730). In the disclosed embodiment, 
the varying encryption parameter is an encryption key. Furthermore, regarding Claim 14 as 
amended, Jones '730, Nardone '700, and Leppek '501 in combination address the issue of 
"multiple parameters" as well as the issue of "simultaneous dynamic change", as described in 
paragraphs 12-13 below. 

Regarding Claim 15, Jones '730, Nardone '700, and Leppek '501 in combination teach 
all the limitations of Claim 14 as described above. Furthermore, Jones '730 teaches varying of 
an encryption key (column 8, lines 26-36; Jones '730) using a similar argument as provided for 
Claim 6 above. 



t 
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Regarding Claim 16, Jones '730, Nardone '700, and Leppek c 501 in combination teach 
all the limitations of Claim 15 as described above. Furthermore, Jones £ 730 teaches the 
disclosed invention applied to digital data (column 3, lines 13-16; Jones '730). 

Regarding Claim 17, Jones '730, Nardone '700, and Leppek '501 in combination teach 
all the limitations of Claim 14 as described above. Furthermore, Jones '730 teaches varying an 
encryption parameter according to the passage of bits (column 3, lines 16-25; Jones '730) using a 
similar argument as provided for Claim 5. Furthermore, regarding Claim 17 as amended, Jones 
'730, Nardone '700, and Leppek '501 in combination address the issue of "multiple parameters" 
as described in paragraphs 12-13 below. 

Regarding Claim 18, Jones £ 730, Nardone '700, and Leppek '501 in combination teach 
all the limitations of Claim 17 as described above. Furthermore, Jones '730 teaches encrypting 
multiple portions of a bit stream (column 3, lines 19-25; Jones '730) using similar argument as 
provided for Claim 12 above. Furthermore, regarding Claim 18 as amended, Jones '730, 
Nardone '700, and Leppek '501 in combination address the issue of "multiple parameters" as 
described in paragraphs 12-13 below. 

Regarding Claim 19 Jones '730, Nardone '700, and Leppek '501 in combination teach all 
the limitations of Claim 14 as described above. Furthermore, Jones '730 teaches varying at least 
one encryption parameter (column 12, lines 32-37 and column 12, lines 40-49; Jones '730) using 
a similar argument as provided for Claim 2 above. Furthermore, regarding Claim 19 as 
amended, Jones '730, Nardone '700, and Leppek '501 in combination address the issue of 
"multiple parameters" as described in paragraphs 12-13 below. 
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Regarding Claim 26, Jones '730, Nardone '700, and Leppek '501 in combination teach 
all the limitations of Claim 14 as described above. Furthermore, Jones '730 teaches the 
additional limitation of Claim 26, that an encryption parameter be varied for a block of data 
(column 3, lines 19-25; Jones '730) using a similar argument as provided for Claim 13 above. 
Furthermore, regarding Claim 26 as amended, Jones '730, Nardone '700, and Leppek '501 in 
combination address the issue of "multiple parameters" as described in paragraphs 12-13 below. 

Regarding Claim 27, Jones '730, Nardone '700, and Leppek '501 in combination teach 
corresponding limitations, specifically a system for protecting a stream of data to be transferred 
between a sender and a receiver (column 1, lines 37-42; Jones '730), said system comprising: 

an encryption unit disposed at said sender for encrypting the stream of data prior 
to transfer to said receiver, said encryption unit being adapted to dynamically 
vary encrypting of the stream of data by changing at least one encryption 
parameter based on an occurrence of a predefined condition in said data stream 
and signaling said change in encryption parameter to said receiver (column 12, 
lines 38-39; column 12, lines 32-37; and column 12, lines 40-49; Jones '730); 
and 

a decryption unit disposed at said receiver for decrypting said encrypted data, 
said decryption unit being adapted to receive said changed encryption parameter 
to account for said dynamic varying of said encrypting by said encryption unit 
using said changed encryption parameter (column 12, lines 50-51; Jones c 730). 
The preferred embodiment of Jones '730 discloses an invention in which "means are 
employed at both the transmitting and receiving stations to monitor the flow of transmitted data 



# 
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and to advance the random number generator each time the transmitted data satisfies a 
predetermined condition" (column 1, lines 50-54; Jones e 730). This advancement causes the 
change of the cryptographic key used to encrypt and decrypt the data stream, and thus constitutes 
dynamic variance of at least one encryption parameter. 

Furthermore, regarding Claim 27 as amended, Jones '730, Nardone '700, and Leppek 
'501 in combination address the issue of "multiple parameters" and "dynamically changing 
parameters simultaneously" as described in paragraphs 12-13 below. 
Claims 3. 9-11, 20, and 22-25 (as amended): 

Regarding Claim 3, Jones '730 teaches all the limitations of Claim 2 as described above. 
Jones '730 does not teach varying the following multiple encryption parameters: "an encryption 
key, an encryption granularity, an encryption density scale, an encryption density, an encryption 
delay, an encryption key update variable, and an encryption key update data trigger" 
simultaneously, and furthermore only explicitly teaches varying the encryption key, update 
variable, and trigger. 

Nardone '700, explicitly teaches encrypting a bit stream taking into account encryption 
granularity, density, and delay (column 3, line 65 to column 4, line 13; Nardone '700). 
Furthermore, Nardone '700 teaches selectively encrypting a bit stream rather than encrypting the 
entire bit stream (column 3, line 65 to column 4 line 13; Nardone '700). Nardone '700 does not 
explicitly teach combining with other encryption algorithms. 

Leppek '501 teaches varying arbitrary encryption schemes in order to encrypt a bit 

stream 
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To incorporate the variance of encryption key data as taught by Jones '730, the 
encryption granularity and density data as taught by Nardone '700, in addition to any other 
arbitrary encryption scheme, using the method taught by Leppek '501, would have been obvious 
to a person having ordinary skill in the art at the time of the invention as the combination of the 
same is necessary and explicitly taught therein as will be demonstrated below. 

The motivation to vary encryption schemes on a bit stream and not just to use the Jones 
c 730 encryption key variance method, is suggested by Leppek '501 teaching that "a fundamental 
characteristic of essentially all encryption operators or algorithms is the fact that, given enough 
resources, almost any encryption algorithm can be broken. This, coupled with the fact that each 
encryption algorithm has a footprint', which is discernable in the scrambled data by a 
sophisticated data communications analyst, means that no data communication can be guaranteed 
as secure" (column 1, lines 54-60; Leppek 4 501). In other words, using the same encryption 
scheme on a continuous bit stream will eventually provide a statistically significant amount of 
data for a hacker to break the encryption scheme. Thus Leppek '501 discloses an invention that, 
"combines selected ones of plurality of different encryption operators" (column 1, lines 65-67; 
Leppek '501). Furthermore he goes on to teach, "The encryption routines ... need not be any 
particular type of encryption algorithm, and may be conventional encrypting operators, such as 
PGP, DES ..." (column 4, lines 13-17; Leppek c 501). Thus Leppek '501 teaches necessity for an 
implementer using the Jones '730 encryption key variance method, to vary the encryption 
scheme itself in order to reduce the cryptographic footprint of the bit stream 

The motivation to choose the Nardone '700 granularity/density/delay variance method as 
an additional encrypting scheme required by the Jones '730/Leppek '501 combination is 
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suggested by Nardone '700 teaching, "Experience has shown that the decryption and 
decompression of a fully encrypted MPEG compressed movie can consume as much as 30% of 
the available processor cycles, even with the latest high performance processors" (column 1, 
lines 32-38; Nardone c 700). An implementer who wished to apply the Jones C 730/Leppek '501 
combination to MPEG data in order to take advantage of the MPEG market, would be motivated 
to choose an encryption algorithm that was not computationally intensive. In fact, Nardone '700 
goes on to teach an approach, in which, "a fraction of the BTUs (Basic Transfer Units) ... are 
encrypted only a few percent of the processor cycles required by the total encryption 
approach for decryption will be required to decrypt and render the {CVD+} (the encrypted bit 
stream).." (column 3, line 65 to column 4 line 13; Nardone '700). Thus, Nardone '700 teaches 
the necessity for an implementer using the Jones '730/Leppek '501 combination to use the 
Nardone '700 granularity/density/delay variance method as an alternate for the Jones '730 
encryption key variance method. 

The motivation to use the Nardone '700 granularity/density/delay variance method with 
the Jones '730 encryption key variance method in combination, in the context of reducing 
cryptographic footprint as taught by Leppek '501 is also suggested by the Nardone '700 teaching 
to selectively encrypt the bit stream. As described above. Nardone '700 teaches that one can 
approximate bit stream degradation achieved by total encryption, by partially encrypting the bit 
stream, and one would further achieve the benefit of requiring less processor cycles. Thus an 
implementer would be motivated to use the Jones '730 encryption key variance method to 
selectively encrypt the bit stream rather than the entire bit stream as taught by Nardone '700. 
Thus Nardone '700 teaches the necessity for an implementer using the Jones '730/Leppek '501 
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combination to use the Nardone '700 granularity/density/delay variance method not only as an 
alternate for the Jones '730 encryption key variance method but also in conjunction with each 
other. 

In summary, since it would have been necessary for an implementer using the Jones '730 
encryption key variance method to reduce cryptographic footprint by using the method of 
Leppek '501; and since it would have been necessary for an implementer to choose a low 
processing overhead encryption method such as the Nardone '700 granularity/density/delay 
scheme as an alternate encryption algorithm in order to efficiently encrypt multimedia data; and 
since furthermore it would have been necessary to use the Nardone '700 
granularity/density/delay scheme in conjunction with the Jones '730 encryption key variance 
method in order to have the Jones '730 method itself be efficient for encrypting multimedia data; 
it would have been necessary and obvious to a person having ordinary skill in the art to combine 
the teachings of Jones '730, Nardone '700, and Leppek '501 as described above. Thus Claim 3 
is rejected under 35 USC 103(a). 

Regarding Claim 9, Jones '730 teaches all the limitations of Claim 1 as described above, 
including the varying of an encryption key. However, Jones '730 does not teach a "plurality of 
encryption parameters being employed by said encrypting and wherein said changed encryption 
parameter of said dynamically varying comprises one encryption parameter of said plurality of 
encryption parameters." Furthermore, Jones '730 does not teach "initializing a plurality of 
encryption parameters based on sensitivity of said stream of data." 



Application/Control Number: 09/443,204 Page 14 

Art Unit: 2171 

Leppek '501 teaches the use of multiple encryption algorithms as described above. 
Leppek '501 also teaches "initializing a plurality of encryption parameters" (column 4, lines 52- 
66; Leppek '501) but does not use sensitivity of the bit stream as a criterion for initialization. 

Nardone '700 teaches the varying of granularity and density encryption, specifically only 
encrypting a selected portion of a bit stream as described above. Nardone '700 also teaches 
"sensitivity of said stream of data" as a criterion for encryption parameter initialization (column 
3, line 65 to column 4 line 13; Nardone '700). 

To incorporate the variance of encryption key data as taught by Jones 5 730, the 
encryption granularity and density data as taught by Nardone '700, in addition to any other 
arbitrary encryption scheme, using the method taught by Leppek '501, would have been obvious 
to a person having ordinary skill in the art at the time of the invention as the combination of the 
same is necessary and explicitly taught therein as described above. Furthermore, it would have 
been obvious and necessary to a person having ordinary skill in the art at the time of the 
invention by the applicant to combine the to initialize the plurality of parameters as taught by 
Leppek '501, based on the sensitivity of the bitstream as taught by Nardone '700 as will be 
demonstrated below. 

The motivation to combine the Jones '730 / Nardone '700 / Leppek '501 in order to 
provide for "plurality of encryption parameters being employed by said encrypting and wherein 
said changed encryption parameter of said dynamically varying comprises one encryption 
parameter of said plurality of encryption parameters" is the same motivation as described in 
Claim 3. 



• 
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The motivation to combine the "initializing a plurality of encryption parameters based on 
sensitivity of said stream of data" as taught by Leppek c 501 into the Jones '730 / Nardone £ 700 / 
Leppek '501 combination is suggested by the fact that the Leppek '501 scheme delegates actual 
encryption to other algorithms and these algorithms inherently require initialization. Leppek 
'501 describes his disclosed invention as a "virtual encryption scheme" in which "the overall 
encryption operator itself does not actually perform any encrypting of the data. Instead, it 
assembles selected ones of a plurality of true encryption mechanisms into a cascaded sequence 
..." (column 2, lines 6-13; Leppek '501). Thus the Leppek '501 invention would have to 
delegate to other encryption methods in order to actually encrypt the bit stream. Both the Jones 
c 730 and Nardone '700, which are used in combination with Leppek '501 require initialization 
choices to be made (column 3; lines 26-40; Jones '730 and column 1, lines 50-59; Nardone 
'700). Thus in order to be used in combination with the invention of Leppek '501, the Jones 
'730 and Nardone '700 algorithms must be initialized. Furthermore, Nardone £ 700 teaches a 
motivation to set encryption granularity and density in order to reduce processing cycles (column 
3, line 65 to column 4 line 13; Nardone '700). From this it is inherent that the initialization 
values should be set based on a tradeoff between processing overhead and adequate encryption. 
Thus it would have been obvious to a person having ordinary skill in the art at the time of the 
invention by the applicant to combine the to initialize the plurality of parameters as taught by 
Leppek '501, based on the sensitivity of the bitstream as taught by Nardone '700. 

Furthermore, regarding Claim 9 as amended, Jones '730, Nardone '700, and Leppek '501 
in combination address the issue of "multiple parameters" as described in paragraphs 12-13 
below. 
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Regarding Claim 10, Jones '730 teaches all the limitations of Claim 1 as described above. 
Jones '730 does not explicitly teach the setting and varying of parameters, nor does it explicitly 
teach the use of MPEG compressed data as the data payload of a bit stream, nor does it explicitly 
teach the use of sensitivity of the bit stream for a criterion for setting parameters. 

Leppek '501 teaches the use of multiple encryption algorithms as described above. 
Leppek '501 also teaches "setting a plurality of encryption parameters" (column 4, lines 52-66; 
Leppek '501) but does not use sensitivity of the bit stream as a criterion for initialization. 

Nardone '700 teaches the varying of granularity and density encryption, specifically only 
encrypting a selected portion of a bit stream as described above. Nardone '700 also teaches 
"sensitivity of said stream of data" as a criterion for encryption parameter initialization (column 
3, line 65 to column 4 line 13; Nardone '700). Moreover, Nardone '700 teaches an embodiment 
in which the bit stream is composed of MPEG compliant video data and MPEG compliant audio 
data including Dolby AC-3 data (column 2, lines 56-66; Nardone '700). 

The motivation to combine the Jones '730 / Nardone '700 / Leppek '501 in order to 
provide for "plurality of encryption parameters for use by said encrypting" is the same 
motivation as described in Claim 3. 

The motivation to use MPEG compressed data as the payload of the Jones '730 / Nardone 
'700 / Leppek '501 in combination would be to make the combination applicable to the large 
MPEG market. A practitioner would have been motivated to use MPEG compliant data as the 
payload in the Jones '730 / Nardone '700 / Leppek '501 combination. In fact, the motivation to 
use the Nardone '700 granularity/density/delay encryption method was motivated by balancing 
processing overhead with encryption security in multimedia data. 
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The motivation to use sensitivity of stream data as a criterion for encryption parameter 
initialization in the Jones '730 / Nardone c 700 / Leppek £ 501 combination is the same motivation 
as described in Claim 9. 

Thus, it would have been necessary and obvious to a person having ordinary skill in the 
art to use MPEG compressed data and to use sensitivity of stream data as a criterion for 
encryption parameter initialization in the Jones '730 / Nardone '700 / Leppek '501 combination. 

Furthermore, regarding Claim 10 as amended, Jones '730, Nardone '700, and Leppek 
'501 in combination address the issue of "multiple parameters" as described in paragraphs 12-13 
below. 

Regarding Claim 1 1, Jones '730 teaches the limitations of Claim 1 as described above. 
Jones '730 does not teach all the limitations of Claim 10. Furthermore, Jones '730 does not 
teach the setting of a, "plurality of encryption parameters ... establishing at least some of an 
encryption granularity, and initial encryption key, a density scale, a density, an encryption delay, 
and a key update data trigger for said stream of MPEG encoded data." 

Leppek '501 teaches the use of multiple encryption algorithms as described above. 
Leppek '501 also teaches "setting a plurality of encryption parameters" (column 4, lines 52-66; 
Leppek '501) but does not use sensitivity of the bit stream as a criterion for initialization. 

Nardone '700 teaches the varying of granularity and density encryption, specifically only 
encrypting a selected portion of a bit stream as described above. Nardone '700 also teaches 
"sensitivity of said stream of data" as a criterion for encryption parameter initialization (column 
3, line 65 to column 4 line 13; Nardone '700). Moreover, Nardone '700 teaches an embodiment 
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in which the bit stream is composed of MPEG compliant video data and MPEG compliant audio 
data including Dolby AC-3 data (column 2, lines 56-66; Nardone '700). 

The motivation to combine Jones '730 / Nardone '700 / Leppek '501 in order to provide 
for the setting of "plurality of encryption parameters ... establishing at least some of an 
encryption granularity, and initial encryption key, a density scale, a density, an encryption delay, 
and a key update data trigger," is described in the discussion regarding Claim 10 above. 

The motivation to apply the Jones '730 / Nardone '700 / Leppek '501 combination 
method to a "stream of MPEG encoded data" is described in the discussion regarding Claim 3 
above. 

As such it would have been necessary and obvious to a person having ordinary skill in the 
art apply the setting of the enumerated encryption parameters to MPEG encoded data 

Furthermore, regarding Claim 1 1 as amended, Jones '730, Nardone '700, and Leppek 
'501 in combination address the issue of "multiple parameters" as described in paragraphs 12-13 
below. 

Regarding Claim 20, Jones '730 teaches all the limitations of Claim 19 as described 
above. Jones '730 does not teach the setting multiple encryption parameters, including in 
combination. 

Nardone '700 teaches the setting of a encryption granularity/density/delay and the 
selective encoding of a bit stream as described above. 

Leppek '501 teaches the rotating among several encryption algorithms as described 

above. 
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The motivation to combine Jones '730 1 Nardone c 700 / Leppek '501 to set multiple 
encryption parameters is the same as described in the discussion regarding Claim 3. As such, it 
would have been necessary and obvious for a person having ordinary skill in the art to modify 
Jones £ 730 to set multiple encryption parameters, including in combination, as described in the 
discussion above regarding Claim 3. Thus Claim 20 is rejected under 35 USC 103(a). 

Regarding Claim 22, Jones £ 730 teaches all the limitations of Claim 14 as described 
above. However, Jones '730 does not teach setting of multiple parameters based on sensitivity 
of the data 

Nardone c 700 teaches the setting of a encryption granularity/density/delay and the 
selective encoding of a bit stream as described above. Nardone e 700 also teaches "sensitivity of 
said stream of data" as a criterion for encryption parameter initialization as described above. 

Leppek '501 teaches the rotating among several encryption algorithms as described 

above. 

The motivation combine Jones '730, Nardone '700, and Leppek '501 in order to set of 
multiple parameters based on sensitivity of the data is described in the discussion above 
regarding Claim 9. As such, it would have been necessary and obvious for a person having 
ordinary skill in the art to modify Jones '730 to set multiple parameters based on sensitivity of 
data. Thus Claim 22 is rejected under 35 USC 103(a). 

Regarding Claim 23, Jones '730 teaches all the limitations of Claim 14 as described 
above. Jones '730 does not explicitly teach the additional limitations of Claim 22 which Claim 
23 incorporates. Furthermore, Jones '730 does not explicitly teach the use of a decompression 
decoder. 
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Nardone '700 teaches the setting of a encryption granularity/density/delay and the 
selective encoding of a bit stream as described above. Nardone '700 also teaches "sensitivity of 
said stream of data" as a criterion for encryption parameter initialization as described above. 
Furthermore, Nardone e 700 explicitly teaches the use of compressed MPEG data (column 2, 
lines 56-66; Nardone '700), which implies an MPEG decoder, which in turn implies a 
decompression decoder. 

Leppek '501 teaches the rotating among several encryption algorithms as described 

above. 

The motivation to combine Jones '730 with Nardone '700 and Leppek '501, to set a 
plurality of encryption parameters is described in the discussion above regarding Claim 22. 

The motivation to combine Jones '730 with Nardone '700 and Leppek '501 in order to 
carry compressed data and to use MPEG data is inherent in the the desire to carry MPEG data. 
In fact, Nardone '700 explicitly teaches the use of MPEG data. As a result, in order to render the 
data, adding an MPEG decoder after encryption is inherent in the Jones '730 / Nardone '700 / 
Leppek '501 combination. Since MPEG is inherently a compression standard, addition of the 
MPEG decoder constitutes adding a decompression decoder. As such, it would have also been 
necessary and obvious for a person having ordinary skill in the art to combine Jones '730 with 
Nardone '700 and Leppek '501 not only for the reasons enumerated in the discussion regarding 
Claim 22, but also for the benefit of a decompression decoder. Thus Claim 23 is rejected under 
35 USC 103(a). 

Regarding Claim 24, Jones '730 teaches all the limitations of Claim 14 above. However, 
Jones '730 does not explicitly teach all the limitations of Claim 23 which Claim 24 incorporates. 
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Furthermore, Jones '730 does not explicitly teach the use of MPEG, video and audio, and Dolby 
AC-3 data for the data payload. 

Nardone '700 teaches the setting of a encryption granularity/density/delay and the 
selective encoding of a bit stream as described above. Nardone '700 also teaches "sensitivity of 
said stream of data" as a criterion for encryption parameter initialization as described above. 
Furthermore, Nardone '700 explicitly teaches the use of compressed MPEG data (column 2, 
lines 56-66; Nardone '700), which implies an MPEG decoder. 

Leppek '501 teaches the rotating among several encryption algorithms as described 

above. 

The motivation to combine Jones '730 / Nardone '700 / Leppek '501 to set a plurality of 
encryption parameters and to use compressed data is described in the discussion regarding Claim 
23 above. 

The motivation to combine Jones '730 / Nardone '700 / Leppek '501 to use MPEG data 
is inherent in the discussion regarding Claim 23 above. The counterexample in the discussion 
above on Claim 23 explicitly refers to the Nardone '700 in which MPEG, video and audio, and 
Dolby AC-3 data is used for the data payload (column 2, lines 56-66; Nardone '700). Thus it 
would have been obvious for a person having ordinary skill in the art to combine Jones '730 / 
Nardone '700 / Leppek '501 in order to set multiple encryption parameters, and to use 
MPEG/AC-3 multimedia data for a data payload. Thus Claim 24 is rejected under 35 USC 
103(a). 

Regarding Claim 25, Jones '730 teaches all the limitation of Claim 14 above. However, 
Jones '730 does not explicitly teach all the limitations of Claim 23 which Claim 25 incorporates. 
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Furthermore, Jones '730 does not explicitly teach the limitation of initializing a number of 
encryption parameters. 

Nardone c 700 teaches the setting of a encryption granularity/density/delay and the 
selective encoding of a bit stream as described above. Nardone c 700 also teaches "sensitivity of 
said stream of data" as a criterion for encryption parameter initialization as described above. 
Furthermore, Nardone '700 explicitly teaches the use of compressed MPEG data (column 2, 
lines 56-66; Nardone '700), which implies an MPEG decoder. 

Leppek '501 teaches the rotating among several encryption algorithms as described 
above. Leppek '501 also teaches the initialization of encryption parameters as described above. 

The motivation to combine Jones '730 / Nardone '700 / Leppek '501 in order to meet the 
limitations of Claim 23 is described in the above discussion regarding Claim 23. 

The motivation to combine Jones '730 / Nardone '700 / Leppek '501 in order to meet 
initialize multiple encryption parameters is described in the above discussion regarding Claim 
11. 

Thus it would have been obvious for a person having ordinary skill in the art to combine 
Jones '730 / Nardone '700 / Leppek '501 to meet the limitations of Claim 25. Thus Claim 25 is 
rejected under 35 USC 103(a). 

5. Claims 1, 13, 14, and 26 are rejected under 35 U.S.C 103(a) as being unpatentable over 
by U.S. Patent No. 5,991,403 issued to Aucsmith et al. (Aucsmith '403), in view of Nardone 
'700, and Leppek '501. 
Claims 1 and 13 (as amended): 
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Regarding Claims 1 and 13, Aucsmith c 403 teaches corresponding limitations, 
specifically all the limitations of Claim 1 : encrypting data (column 4, lines 55-65; Aucsmith 
'403), varying an encryption parameter (column 2, lines 28-30; Aucsmith '403), and decrypting 
the data (column 4, line 66 to column 5, line 8; Aucsmith '403). Furthermore it specifies the 
additional limitation of Claim 13: "dynamically varying said at least one encryption parameter 
responsive to passage of a predefined number of data bits in said stream of data or alternatively, 
responsive to passage of a predefined number of data units in said stream of data wherein said 
data units comprise at least one of a program, a sequence, a group of pictures, a slice, or a 
macroblock" (column 2, lines 28-30; Aucsmith '403). 

In the preferred embodiment, the parameter being varied is an encryption key and the 
data unit to be encrypted is a group of pictures (GOP) (column 2, lines 28-30; Aucsmith '403). 

Furthermore, regarding Claims 1 and 13 as amended, Aucsmith '403 teaches 
corresponding limitations as Jones '730. However, Aucsmith '403 does not explicitly teach the 
additional limitations regarding "dynamically changing parameters simultaneously" and 
"multiple parameters." 

Nardone '700 teaches dynamically changing encryption parameters as described in 
paragraphs 12-13 below. However, Nardone '700 does not explicitly teach setting multiple 
parameters. 

Leppek '501 teaches setting multiple parameters as described in paragraphs 12-13 below. 

It would have been obvious to a person having ordinary skill in the art to combine 
Aucsmith '403, Nardone 700, and Leppek '501 on the same basis as described in paragraphs 12- 
13 below wherein the Jones '730 reference is replaced with the Aucsmith '403 reference. 
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Claims 14 and 26 (as amended): 

Regarding Claims 14 and 26, Aucsmith '403 teaches corresponding limitations, 
specifically all the limitations of Claim 14: varying an encryption parameter (column 2, lines 28- 
30; Aucsmith '403), and decrypting the data (column 4, line 66 to column 5, line 8; Aucsmith 
'403). Aucsmith '403 also teaches the additional limitation of Claim 26 on the same basis as 
described in the discussion on Claim 13 above: the varying parameter is an encryption key and 
the data unit is a GOP (column 2, lines 28-30; Aucsmith '403). 

Furthermore, regarding Claims 14 and 26 as amended, Aucsmith '403 teaches 
corresponding limitations as Jones '730. However, Aucsmith '403 does not explicitly teach the 
additional limitations regarding "dynamically changing parameters simultaneously" and 
"multiple parameters " 

Nardone '700 teaches dynamically changing encryption parameters as described in 
paragraphs 12-13 below. However, Nardone '700 does not explicitly teach setting multiple 
parameters. 

Leppek '501 teaches setting multiple parameters as described in paragraphs 12-13 below. 

It would have been obvious to a person having ordinary skill in the art to combine 
Aucsmith '403, Nardone 700, and Leppek '501 on the same basis as described in paragraphs 12- 
13 below wherein the Jones '730 reference is replaced with the Aucsmith '403 reference. 

6. Claims 4 and 21 are rejected under 35 U.S.C. 103(a) as being unpatentable over Jones 
'730 in view of Nardone '700 and Leppek '501 and in further view of "Digital Television 
Achieves Maturity" by Leonardo Chiariglione, copyrighted 1998 (Chiariglione '98). 
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Claim 4: 

Regarding Claim 4, Jones '730 / Nardone '700 / Leppek '501 in combination teach all the 
limitations of Claim 3 as described above. Furthermore, Nardone '700 teaches varying 
encryption schemes via a policy (column 2, lines 40-46; Nardone '700) and furthermore in a 
disclosed embodiment teaches varying the policy dynamically (column 4, lines 23-42; Nardone 
'700). However, Jones '730 / Nardone c 700 / Leppek '501 do not teach multiplexing in the 
variance information into the encrypted bit stream 

Chiariglione '98 teaches multiplexing in the variance information into the encrypted bit 
stream (page 2, line 32 to page 3, line 8, and Figure 1; Chiariglione '98). 

To incorporate the multiplexing in of variance information into the encrypted bit stream 
as taught by Chiariglione '98, to the Jones '730 / Nardone '700 / Leppek '501 combination, 
would have been obvious to a person having ordinary skill in the art at the time of the invention 
as the combination of the same is necessary and explicitly taught therein as will be demonstrated 
below. 

The motivation to transmit dynamically varying encryption policy information via the 
Chiariglione '98 within the context of the Jones '730 / Nardone '700 / Leppek '501 combination 
is suggested by the fact that both disclosures are refer to the encryption/decryption of multimedia 
data. Selectively encrypt a bit stream as taught by Nardone '700 is a direct consequence of 
handling multimedia data. The Chiariglione '98 teaching discusses the MPEG-2 specification, 
which discloses use of EMM and ECM messages multiplexed into the bit stream in order to 
provide access control information dynamically. In order to take advantage of the MPEG 
market, the inventor would have been motivated to use of EMM and ECM messages multiplexed 
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into the bit stream as taught by the MPEG specification. As such, it would have been necessary 
and obvious to apply the Chiariglione '98 teaching with the Jones '730 / Nardone '700 / Leppek 
'501 combination in order to be compliant with the MPEG specification and thus be salable in 
the MPEG market. Thus Claim 4 is rejected under 35 USC 103(a). 
Claim 21: 

Regarding Claim 21, Jones '730 teaches all the limitations of Claim 14. However, Jones 
'730 does not teach multiplexing in the encryption parameter in with the bit stream. 

However, the Jones '730 / Nardone c 700 / Leppek '501 / Chiariglione '98 combination 
described in the discussion regarding Claim 4 above teaches multiplexing in the encryption 
parameter in with the bit stream 

It would have been necessary and obvious for a person having ordinary skill in the art to 
modify Jones '730 to multiplex in the encryption parameter in with the bit stream as described in 
the discussion above regarding Claim 4. Thus Claim 21 is rejected under 35 USC 103(a). 

7. Claim 28 is rejected under 35 U.S.C. 103(a) as being anticipated by U.S. Patent No. 
5,719,937 issued to Warren et al. (Warren '937), in view of Nardone '700, and in further view 
of Leppek '501. 
Claim 28: 

Regarding Claim 28, Warren '937 teaches corresponding limitations, specifically a 
program storage device readable by a machine, tangibly embodying at least one program of 
instructions executable by the machine to perform a method for protecting a stream of data to be 
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transferred between an encryption unit and a decryption unit (column 3, lines 42-47; column 6; 

lines 28-36; Warren '937), comprising; 

encrypting the stream of data at said encryption unit for transfer thereof to said 
decryption unit (column 3, line 65 to column 4, line 13; Warren '937); 
dynamically varying said encrypting of said stream of data at said encryption 
unit by changing an encryption parameter and signaling said change in 
encryption parameter and signaling said change in encryption parameter to said 
decryption unit, wherein said dynamically varying of said encryption parameter 
is responsive to occurrence of a predefined condition in said stream of data 
(column 4, lines 6-12; Warren '937); and 

decrypting said encrypted data at the decryption unit, said decrypting accounting 
for said dynamic varying of said encrypting by said encryption unit using said 
changed encryption parameter (column 6, line 36 to column 7, line 45 ; Warren 
'937). 

The preferred embodiment of Warren '937 is to embed tags that hold metadata that 
determine mode of encryption, and may be encoded in real-time (column 4, line 8; Warren '937). 
In the disclosed example, the tags can specify a number of ways to vary encryption in a bit 
stream (column 5, lines 28-36; Warren '937). Furthermore, the decryptor works in a 
complementary way. Finally, the data can be persisted in media such as a DVD or CD (column 
6, lines 27-37; Warren '937) but may apply to any compatible storage media. Thus Warren '937 
teaches all the limitations of Claim 28. 
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Furthermore, regarding Claim 28 as amended, Warren '937 teaches corresponding 
limitations as Jones '730. However, Warren c 937 does not explicitly teach the additional 
limitations regarding "dynamically changing parameters simultaneously" and "multiple 
parameters." 

Nardone c 700 teaches dynamically changing encryption parameters as described in 
paragraphs 12-13 below. However, Nardone '700 does not explicitly teach setting multiple 
parameters. 

Leppek '501 teaches setting multiple parameters as described in paragraphs 12-13 below. 

It would have been obvious to a person having ordinary skill in the art to combine 
Warren '937, Nardone 700, and Leppek '501 on the same basis as described in paragraphs 12-13 
below wherein the Jones '730 reference is replaced with the Warren '937 reference. 

8. Claims 29-30 and 32-38 are rejected under 35 U.S.C. 103(a) as being unpatentable in 
view of Jones '730 in view of Warren '937, and in further view of Nardone '700 and moreover 
in view of Leppek '501. 
Claims 29 and 32-25 (as amendedV 

Regarding Claims 29 and 32-35, Jones '730 teaches corresponding limitations in all the 
aforementioned claims with the exception of explicitly teaching a program storage device. Refer 
to the discussions regarding Claims 2, and 5-8 respectively. 

Warren '937 teaches a program storage device (column 6, lines 28-36; Warren '937) as 
described in the discussion regarding Claim 28 above. 
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The motivation to apply the encryption scheme of Jones '730 to the program storage 
device of Warren '937 is suggested by Warren '937, "it would be desirable to provide an 
electronic copy management scheme for controlling the reproduction of proprietary data" 
(column 1, lines 36-38; Warren '937). In fact, Warren '937 discloses one such invention. 
Furthermore, the motivation to use the method of Jones '730 is suggested by Jones '730, "For 
increased data security, the encryption key value may be changed frequently to further reduce the 
likelihood that an unauthorized party may decipher the data" (column 1, lines 22-25; Jones e 730). 
Thus an implementer who used the program storage device and copy management method of 
Warren '937, who desired to reduce the ability to hack the data would be motivated to add the 
encryption method of Jones '730. 

Furthermore, regarding Claims 29 and 32-35 as amended Jones '730 does not explicitly 
teach the additional limitations regarding "dynamically changing parameters simultaneously" 
and "multiple parameters." 

Nardone '700 teaches dynamically changing encryption parameters as described in 
paragraphs 12-13 below. However, Nardone '700 does not explicitly teach setting multiple 
parameters. 

Leppek '501 teaches setting multiple parameters as described in paragraphs 12-13 below. 

It would have been obvious to a person having ordinary skill in the art to combine 
Nardone 700 and Leppek *501 with Jones '730 and Warren '937 on the same basis as described 
in paragraphs 12-13 below. 
Claims 30 and 36-38 (as amended): 
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Regarding Claims 30 and 36-38, Jones '730, Nardone '700, and Leppek '501 in 
combination teach corresponding limitations in all the aforementioned claims with the exception 
of explicitly teaching a program storage device. Refer to the discussions regarding Claims 3, 14, 
10, and 1 1 respectively. 

The motivation to apply the encryption scheme of the Jones £ 730 / Nardone '700 / 
Leppek '501 combination to the program storage device of Warren '937 is suggested by Warren 
'937, "it would be desirable to provide an electronic copy management scheme for controlling 
the reproduction of proprietary data" (column 1, lines 36-38; Warren '937). In fact, Warren '937 
discloses one such invention. Furthermore, the motivation to use the method of the Jones '730 / 
Nardone '700 / Leppek '501 combination is suggested by Warren '937, "it is assumed that the 
source material which is stored on the media is compressed data, and that the media is a laser 
disk, compact disk, or DVD" (column 6, lines 28-3 1; Warren '937). The context of the Warren 
'937 invention is that of multimedia data. As discussed above, the Jones '730 / Nardone '700 / 
Leppek '501 provides a cryptographic combination motivated to be applied to multimedia data. 
Thus a practitioner ordinarily skilled in the art would be motivated to apply the Jones '730 / 
Nardone '700 / Leppek '501 method to the program storage device of Warren '937. Thus 
Claims 30, and 36-38 are rejected under 35 USC 103(a). 

Furthermore, regarding Claims 30 and 36-38 as amended note that Nardone '700 teaches 
dynamically changing encryption parameters and Leppek '501 teaches setting multiple 
parameters as described in paragraphs 12-13 below. 
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9. Claim 3 1 is rejected under 35 U.S.C. 103(a) as being unpatentable over Jones '730, 
Nardone '700, Leppek '501, and Chiariglione '98 in view of Warren '937. 
Claim 31: 

Regarding Claim 31, Jones '730, Nardone '700, Leppek '501, and Chiariglione' 98 teach 
corresponding limitations with the exception of explicitly teaching a program storage device as 
described in the discussion regarding Claim 4 above. 

Warren '937 teaches a program storage device (column 6, lines 28-36; Warren e 937) as 
described in the discussion regarding Claim 28 above. 

The motivation to apply the encryption scheme of the Jones '730 / Nardone '700 / 
Leppek '501 / Chiariglione '98 combination to the program storage device of Warren '937 is 
suggested by Warren '937, "it would be desirable to provide an electronic copy management 
scheme for controlling the reproduction of proprietary data" (column 1, lines 36-38; Warren 
'937). In fact, Warren '937 discloses one such invention. Furthermore, the motivation to use the 
method of the Jones '730 / Nardone '700 / Leppek '501 / Chiariglione '98 combination is 
suggested by Warren '937, "it is assumed that the source material which is stored on the media is 
compressed data, and that the media is a laser disk, compact disk, or DVD" (column 6, lines 28- 
31; Warren '937). The context of the Warren '937 invention is that of multimedia data. As 
discussed above, the Jones '730 / Nardone '700 / Leppek '501 / Chiariglione '98 provides a 
cryptographic combination, including multiplexing encryption data. Thus a practitioner with 
ordinary skill in the art would be motivated to apply the Jones '730 / Nardone '700 / Leppek 
'501 / Chiariglione '98 method to the program storage device of Warren '937. 
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Response to Arguments 

10. Applicant's arguments filed 09 January 2004 have been fully considered but they are not 
persuasive. 

1 1 . Examiner notes the set of limitations under contention as follows: 

• "dynamically changing simultaneously multiple encryption parameters used to 
encrypt the stream of data as the stream of data is passing through the encryption 
unit" [Amendment: p. 13, Ins. 18-20]; and 

• "signaling the dynamic change in the encryption parameters from the encryption unit 
to the decryption unit" [Amendment: p. 14, Ins. 21-22]. 

12. Examiner now addresses these specific limitations over U.S. Patent No. 5,412,730 issued 
to Jones (hereafter Jones '730), U.S. Patent No. 5,805,700 issued to Nardone et al. (hereafter 
Nardone e 700), and U.S. Patent No. 5,933,501 issued to Leppek (hereafter Leppek '501). 

Regarding "dynamically changing simultaneously multiple encryption parameters used to 
encrypt the stream of data as the stream of data is passing through the encryption unit": 

• Encryption devices send encrypted data to decryption devices. It is well known in the 
art to vary the means of encryption in an encryption device in order to improve 
security. Jones '730 teaches one such invention wherein an encryption device whose 
means of encryption involves an encryption key and whose means of varying 
encryption is by varying the encryption key [Jones '730: col. 1, Ins. 22-35]. While 



Application/Control Number: 09/443,204 Page 33 

Art Unit: 2171 

varying the encryption key is one was to vary the means of encryption, it is not the 
only way to vary the means of encryption. The insight of Jones '730 is in the varying 
of the means of encryption. 

• Dynamically changing encryption parameters used to encrypt the stream of data is a 
valid way to vary the means of encryption. Nardone '700 teaches specifying 
encryption parameters via a policy (i.e. the degree of selective encryption in order to 
degrade video image) [Nardone £ 700: col. 1, Ins. 40-50]. Furthermore, Nardone '700 
teaches the dynamic changing of encryption policies [Nardone '700: col. 1, Ins. 51- 
59]. Since a policy teaches the setting of encryption parameters and dynamic 
changing of encryption policies reads on dynamic changing of encryption parameters. 
While varying the degree of selective encryption in order to degrade video image is 
one possible encryption parameter to vary, it is not the only encryption parameter to 
vary. The insight of Nardone '700 is the use of policies that specify parameters to 
vary and the dynamic changing simultaneously multiple encryption parameters via 
dynamically changing policies. 

• Where Nardone '700 is not explicit about setting multiple parameters in a policy, 
Leppek '501 is explicit about setting multiple encryption parameters. Leppek '501 
teaches applying multiple encryption operators [Leppek '501: col. 1, In. 64 to col. 2, 
In. 5]. Encapsulating the setting of multiple encryption parameters of Leppek '501 
into a single policy of Nardone '700, and having a multiplicity of different policies 
(i.e. different multiple encryption parameters set), and dynamically changing policies 
as taught by Nardone '700 [supra], fully reads on dynamically changing simultaneous 
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multiple encryption parameters. The insight of Leppek '501 is the application of 
multiple encryption operators at once. 

• The motivation to combine Nardone '700 with Jones '730 is suggested by Nardone 
'700, i.e. the policies of Nardone '700 teach partial encryption in order to save 
processing cycles on encrypting data. Applying the policies of Nardone '700 to Jones 
'730 creates a combination in which enables selective encryption of the bit stream to 
save cycles and provide fast encryption of streaming data [Nardone '700: col. 1, Ins. 
45-50]. The insight of this combination is rather than Jones '730 simply changing 
encryption keys, Jones '730 can change policies as per Nardone '700 where each 
policy contains an independent setting of encryption parameters. 

• The motivation to apply the multiple parameters of Leppek '501 with the Nardone 
'700 and Jones '730 combination, i.e. to have each of a plurality of policies of 
Nardone '700 specify multiple parameters, and further to have said plurality of 
policies be dynamically changed, is suggested by Leppek '501 which states that 
varying encryption schemes reduces cryptographic footprint and thus increases 
security [Leppek '501 : col. 1, Ins. 54-60; col. 1, Ins. 65-67]. This is analogous to the 
teaching of Jones '730 which states that changing an encryption parameter increases 
data security [Jones '730: col. 1, Ins. 15-21]. The insight of applying Leppek '501 to 
the Nardone '700 and Jones '730 combination is that Jones '730 can change policies 
as per Nardone '700 where each policy contains an independent setting of a 
multiplicity of encryption parameters. 
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Regarding "signaling the dynamic change in the encryption parameters from the encryption unit 
to the decryption unit": 

• The Jones '730 patent, still requires the exchange of random number seed values and 
interval values between the encryptor and decryptor [Jones '730: col. 1, In. 66 to col. 
2, In. 7]. The exchange of random number seed values and/or interval values 
constitutes and event that causes a change in encryption by encryptor and decryptor. 

• Within the context of the Jones '730, Nardone '700, and Leppek '501 combination, 

• On this basis, the Jones '730, Nardone '700, and Leppek '501 combination reads on 
"signaling the dynamic change in the encryption parameters from the encryption unit 
to the decryption unit." 

13. In light of the foregoing, Examiner will now address the arguments put forth by 
Applicant in the Amendment: 

Argument 1: Applicant argues that Jones '730 does not encrypt via dynamically changing 

simultaneously multiple encryption parameters. 
Response 1: On the contrary, Examiner argues that Jones '730, Nardone '700, and Leppek 

'501 in combination (rather than Jones '730 in isolation) does in fact read on 

"dynamically changing simultaneous multiple encryption parameters" as per the 

discussion in paragraph 5 [supra]. 
Argument 2: Applicant argues that Jones '730 does not teach signaling the dynamic change in 

the encryption parameters from the encryption unit to the decryption unit. 
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Response 2: On the contrary, Examiner argues that the point that a random number seed value 
and/or interface value is exchanged between the encrypt or and the decryptor 
constitutes "signaling the dynamic change in the encryption parameters from the 
encryption unit to the decryption unit" as per the discussion in paragraph 5 
[supra]. 

Argument 3: Applicant argues that Nardone '700 does not encrypt via dynamically changing 
simultaneously multiple encryption parameters. 

Response 3: On the contrary, Examiner argues that Jones '730 and Nardone '700 in 

combination teaches dynamically changing policies, and in combination with the 
multiple encryption operators of Leppek '501 encapsulated in a policy, and then 
dynamically changing policies, reads on "dynamically changing simultaneously 
multiple encryption parameters" as per the discussion in paragraph 5 [supra]. 

Argument 4: Applicant argues that Leppek '501 describes encrypting the same data multiple 
times using different encryption operators rather than encrypting different data 
segments with dynamically changing encryption parameters. 

Response 4: On the contrary, Examiner argues that Jones '730 and Nardone '700 teach 

changing policies over different sequences of data. Combined with Leppek '501, 
Jones '730 and Nardone '700 in which a policy contains the multiple encryption 
operators of Leppek '501, the Jones '730, Nardone '700, and Leppek '501 
combination teach encrypting different data segments with dynamically changing 
encryption parameters. 
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Conclusion 

14 Applicant's amendment necessitated the new ground(s) of rejection presented in this 
Office action. Accordingly, THIS ACTION IS MADE FINAL. See MPEP § 706.07(a). 
Applicant is reminded of the extension of time policy as set forth in 37 CFR 1.136(a). 

A shortened statutory period for reply to this final action is set to expire THREE 
MONTHS from the mailing date of this action. In the event a first reply is filed within TWO 
MONTHS of the mailing date of this final action and the advisory action is not mailed until after 
the end of the THREE-MONTH shortened statutory period, then the shortened statutory period 
will expire on the date the advisory action is mailed, and any extension fee pursuant to 37 
CFR 1 . 1 36(a) will be calculated from the mailing date of the advisory action. In no event, 
however, will the statutory period for reply expire later than SIX MONTHS from the date of this 
final action. 

1 5 Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to Patrick J.D. Santos whose telephone number is 703-305-0707. 
The examiner can normally be reached on M-F 8:00-4:30. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Safet Metjahic can be reached on 703-308-1436. The fax phone number for the 
organization where this application or proceeding is assigned is 703-872-9306. 
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Information regarding the status of an application may be obtained from the Patent 
Application Information Retrieval (PAIR) system. Status information for published applications 
may be obtained from either Private PAIR or Public PAIR. Status information for unpublished 
applications is available through Private PAIR only. For more information about the PAIR 
system, see http://pair-direct.uspto.gov. Should you have questions on access to the Private PAIR 
system, contact the Electronic Business Center (EBC) at 866-217-9197 (toll-free). 

Patrick J.D. Santos 
March 19, 2004 




